Digital Asset
Intelligence
Security Incident

Lixir Finance Smart Contract Vulnerability: $12.30K Reported Loss

·Historical incident record

Incident Overview

Lixir Finance's vault tokens (lv_* wrappers over Uniswap V3 LP positions) were exploited due to a broken EIP-2612 permit signature verification. The attacker reused a single dummy signature to bypass checks, granting approval to their contract over dozens of holders' tokens, then drained underlying assets (WETH, USDC, USDT, LIX) via withdrawFrom/withdrawETHFrom, resulting in ~$12,300 loss.

Sources & References

Original incident referencehttps://x.com/DefimonAlerts/status/2070362661691207935 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    AIDC

    Attack methodSmart Contract Vulnerability
    Reported loss$ 121,000
  2. Incident date
    Attack methodSupply Chain Attack
    Reported loss$ 3,100,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed